Image Detection

• Outcome: Pass
• Latest audit: May 28, 2026 at 5:48 AM UTC
• Version:
  1.0.0

Overview

This is an instruction-only image detection skill with optional cloud analysis, and its main risk is privacy clarity rather than hidden or unsafe behavior.

Use the privacy-focused stack for private or regulated images. Before installing the referenced npm packages or enabling Hive, reverse image search, or caching, check what image content, metadata, hashes, and results are transmitted or stored, and how those features can be disabled or deleted.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill promotes a cloud-based image analysis option and includes it in recommended configurations without clearly warning that images may be transmitted to a third-party service. This can lead users to unintentionally send sensitive or private images off-device, creating privacy, compliance, and data-handling risks even if the API itself is legitimate.

VirusTotal

66/66 vendors flagged this skill as clean.